Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Usenet -> c.d.o.misc -> Re: oracle 9i connection string with SYS account
Tojo,
What privileges are granted depends entirely on what the user
will be doing once they're connected to the database. Roles are
collections
of privileges and other roles.
Typically you bundle up a bunch of privileges (say for the FIN schema and a subset of objects ... those involved with PAY) and create a role with all those privileges. Then you grant that role to the user. jc
"tojo" <TomJordanTojo_at_hotmail.com> wrote in message news:MPG.176719e0582fbc81989692_at_news.t-online.de
> In article <3CFCD6F5.1D40219A_at_exesolutions.com>,
> dmorgan_at_exesolutions.com says...
> > The first thing I do to a
> > new database after changing the SYS and SYSTEM passwords is drop CONNECT and
> > create a role that actually provides appropriate access. To many people think
> > CONNECT is the privilege to connect to the database and that just isn't the
> > case.
> >
> >
>
> Could you please tell me what privileges you grant to the new connect
> role? What else besides CREATE SESSION?
>
> Thanks,
> Tom
-- Posted via Mailgate.ORG Server - http://www.Mailgate.ORGReceived on Tue Jun 04 2002 - 18:04:32 CDT